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(57) A method of maintaining mutual consistency 
between copies of data stored at nodes in a network, 
the nodes comprising a server node, and a number of 
client nodes at remote locations, such as laptop com- 
puters linked by cellular telephone connections, the 
nodes being connected intermittently. 

Following a reconnection between the remote client 
node and another of the nodes, timestamp information 
on objects cached at the other node, is sent to the re- 
mote client node. At the remote client node, the times- 
tamp information is compared with corresponding infor- 
mation relating to the local copy, to determine if each of 
the cached objects is more up to date than the local 
copy. The cached objects are updated based on the lo- 
cal copy, according to the result of the comparison. This 
peer to peer resynchronisation means that the server 
need not monitor and control the process, so the system 
is more easily scaled up to handle more clients. 
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Description 

Background to the Invention 
Field of the Invention 

[0001] The present invention relates to methods of 
maintaining mutual consistency between copies of data 
stored at nodes in a network, to methods of carrying out 
an operation on data stored in a network of nodes, to 
client nodes and to software for such methods. 

Background Art 

[0002] it is known to provide users with access to da- 
tabases from terminals at geographically remote loca- 
tions by passing requests and returning data across 
multiple networks. However, delays and network con- 
gestion may arise, if large amounts of data are returned, 
or if the characteristics of the networks, or the links be- 
tween the networks, are not all appropriate, e.g. with re- 
spect to bandwidth, latency, or handling highly asym- 
metric traffic loads. There are various known ways of 
addressing the problems associated with providing 
quick access to the data in such databases. Distributing 
the databases over geographically separated servers is 
one approach. 

[0003] It is well known to create such distributed da- 
tabases, either by dividing the content, or by replicating 
it in the different locations. The replication may be trans- 
parent to the user, or the application, meaning software 
is provided to interface the application/user to the mul- 
tiple copies, which maintains the two or more copies up 
to date without user intervention. To the user/applica- 
tion, it appears as though there is only one copy. 
[0004] The distribution can be pre structured, or dy- 
namic. An example of the latter is the local caching ca- 
pability of some databases, which enables them to 
maintain data which has been accessed by a user, in a 
cache close to the user. For example, it is known for ob- 
ject oriented databases to provide local object caches. 
This can improve performance and scalability. To main- 
taining consistency between the original and the cached 
or replicated versions, it is known to provide a replication 
process over a permanent connection. However, if the 
connection is broken for any length of time, no mecha- 
nism is provided for resynchronising data which has be- 
come inconsistent. 

[0005] For instance, an object may migrate to a new 
machine in order to balance the loads across machines 
or because its original processor crashed; in this case, 
the network address maintained by a name service for 
the object should be updated to reflect its new location. 
Since the data maintained by storage servers is often 
subject to change, a check that cached data returned to 
clients is always valid should be the responsibility of ei- 
ther storage servers or cache managers. Server-initiat- 
ed cache consistency requires data servers to inform 



caches whenever data is updated. Client-initiated cache 
consistency requires cache managers to validate 
cached data with storage servers before returning it to 
clients. Particularly for very large internet environments, 
5 both approaches are expensive and not very attractive 
since they involve elaborate cooperation between serv- 
ers and cache managers. It is known to use techniques, 
such as update timestamps, to allow the validity of data 
in caches to be checked without retrieving and compar- 
io ing it, or without maintaining records of changes. 

[0006] Nevertheless, in the area of distributed persist- 
ent storage, (meaning storage which survives beyond 
the termination of an application to which it relates) data 
replication is preferable to the alternatives of dividing 
and moving portions of a database, or sending queries 
and returning data across extensive networks. It can ad- 
dress the problems of fault tolerance, high availability 
and consistency of data. Since most data are changed 
less than 2% on any given day, the process of managing 
data changes typically requires far less computer and 
network resources than data extracts or cross-system 
queries. Thus, data replication is a new data movement 
technology that addresses efficient asymmetrically bi- 
directional data access across multiple systems. 
[0007] Systems for synchronising the different ver- 
sions of data (meaning making the copies of data mu- 
tually consistent) have been developed for non mobile 
wired networks. Those systems which cater for intermit- 
tent connection, e.g. overnight updates, record transac- 
tions, and replay them when the connection is made. 
For client server systems, the server will determine what 
changes need to be made to the server copy. Systems 
for wired networks are not necessarily suitable for mo- 
bile wireless finked users.because of the different phys- 
ical constraints which arise. Such constraints include 
frequent connection and disconnection, high transmis- 
sion costs and low bandwidth for wireless links, high la- 
tency and limited computing resources, and limited bat- 
tery life. 

[0008] One known system for mobile wireless users 
is called Gold Rush, and is a client/server persistent 
storage architecture developed mainly by Thomas J. 
Watson Research Center at IBM. As published in their 
USE NIX paper, (Conference on Object Oriented Tech- 
nologies and Systems, June 16-20, 1997) Gold Rush is 
a middleware (meaning it is interface software for con- 
verting between other software or protocols) supporting 
the writing of Java applications that reside on an inter- 
mittently connected mobile client device and access an 
enterprise database on a central server. While the client 
is connected to the central server, objects constructed 
from database entities can be cached in a persistent 
store on the client. While the client is disconnected, 
these entities can be manipulated within transactions 
that are logged on the client. Upon reconnection, the cli- 
ent application can replay these logged transactions to 
the server, modifying the database. A replayed transac- 
tion is checked for conflicts with other database updates 
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that have occurred since the client obtained the input 
data for the transaction, and the client is notified when 
such a conflict arises. Communication between the cli- 
ent and the server is optimized to economise the use of 
a slow or expensive connection such as a radio link. 
[0009] It offers transaction merging and conflict reso- 
lution between the client and server. It seems to pre- 
serve the transaction semantics pretty well based on the 
published details. It offers a good client and server per- 
sistent storage framework. All transactions of the mobile 
clients are replayed back to the server upon reconnec- 
tion. This is a typical data resynchronisation strategy 
[0010] A number of problems remain, even with this 
approach. First, keeping the transaction logs and re- 
playing the log back to server upon reconnection may 
take too long. Particularly forthin clients, meaning those 
clients having limited computing resources, e.g. memo- 
ry and processing power, and connected via a slow link, 
or able to connect to the server for a very short period 
of time, the result could be that the mobile client would 
always be out of sync with the server. 
[0011] A second problem arises from it being based 
on a client/server model. The server carries out most of 
the processing and controls and communicates directly 
with ail the clients. Thus the number of clients which can 
be serviced will be limited by the processing and com- 
munications capabilities of the server. 
[0012] A third problem arises from the replication be- 
ing relatively coarse grained, being at the storage/data- 
base level. Particularly where there are limitations in the 
storage capabilities or transmission bandwidth to the cli- 
ent, there may be unacceptable delays, or the client may 
be unable to handle the replication. 

Summary of the Invention 

[0013] It is an object of the present invention to pro- 
vide improved methods and apparatus. 
[001 4] According to one aspect of the present inven- 
tion, there is provided a method of maintaining mutual 
consistency between copies of data stored at nodes in 
a network, the nodes comprising a server node, and a 
number of client nodes at remote locations, the nodes 
being connected intermittently, the client nodes com- 
prising applications which make use of the data, the 
method comprising the steps of, at a remote one of the 
client nodes: 

following a reconnection between the remote client 
node and another of the nodes, receiving from that 
other node, information relating to a portion of the 
data of which there is a local copy at the other client, 
and a remote copy at the remote client node, the 
information showing how up to date is the local 
copy; 

comparing at the remote client node, the informa- 
tion relating to the remote copy with corresponding 
information relating to the local copy, to determine 



if the remote copy is more up to date than the local 
copy; and 

updating the remote copy based on the local copy, 
according to the result of the comparison. One of 

s the advantages arising from doing the comparison 
at the client is that the server need not monitor and 
control the process, so the system is more easily 
scaled up to handle more clients. An advantage 
arising from synchronising based on discarding less 

to recently updated copies is that it means storing 
transaction records, and replaying them, becomes 
optional, and can be dispensed with if appropriate. 
This, in combination with the other features, is par- 
ticularly advantageous for intermittently connected 

75 "thin" remote locations such as palmtop devices 
with limited memory, which might be unable to store 
and replay transactions collected over a long period 
of disconnection. Also, this strategy allows the 
processing load among the servers and clients be 

20 balanced more evenly, and give more autonomy to 
the clients. 

[0015] Preferably the method further comprises the 
step of determining if the content of the remote copy is 

25 the same as the content of the local copy, and initiating 
at the remote node, a conflict resolution process in the 
event that the comparison does not reveal a difference 
between the local copy and the remote copy, but the re- 
spective contents differ. If the timestamp or the versions 

30 of the replicas are the same, but the replicas are differ- 
ent, the client may initiate appropriate conflict resolution 
strategy, for example prompting user for choices, in- 
stead of having the server to make the decision. Initiat- 
ing this at the client also allows the processing load 

35 among the servers and clients be balanced more evenly, 
and gives more autonomy to the clients. 
[0016] Preferably the method further comprises the 
preliminary steps of, during a disconnection, recording 
which portions of the local copy have been modified at 

40 the other node, wherein the information received by the 
remote client node relates to the portion recorded by the 
other node as having been modified. An advantage of 
this is that it enables the portions needing resynchroni- 
sation to be identified quickly and easily. 

4 5 [0017] Preferably the comparison step is carried out 
for each of the recorded portions, modified during the 
disconnection, before carrying out the comparison step 
for a portion modified subsequent to the reconnection. 
One of the advantages of this is that it avoids redundant 

so synchronization. Upon reconnection, the client resyn- 
chronizes objects which are tagged dirty in the dirty bin 
first. If an application requests to update an object during 
reconnection, the object that were tagged dirty must re- 
sychronize with the network first before the application 

55 can proceed to update. If the application is allowed to 
proceed first, the object may be resychronized more 
than once because the object would be tagged dirty 
again and the previous value of the object would be lost. 
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[0018] Preferably the method further comprises the 
step of locking the remote copy to prevent access to it 
during the comparison step. An advantage of this is that 
it can ensure atomicity and prevent recursion. Lookup 
of dirty objects, version comparisons, object update, 
and synchronization states of the objects which are 
tracked by the dirty bin are atomic or synchronized in 
operation. This means the object involved during a syn- 
chronization transaction is exclusively locked. This pre- 
vents the state of the sychronization from becoming in- 
consistent, thus avoiding any possible recursive syn- 
chronization. Atomicity means in general terms, that a 
group of interrelated operations may rely on each others 
data being consistent without interference from outside 
operations. Specifically, it means the comparison output 
will not be invalidated before it is output, by a change in 
one of the copies being compared. 
[0019] Preferably the method comprises the prelimi- 
nary step of determining whether to use the remote 
copy, according to whether the information relating to 
the remote copy has been received at the first of the 
clients. An advantage of this is that availability of data 
can be improved, which may be particularly significant 
if connections are short or infrequent. The greedy bit or 
flag may be turned on to force the current synchroniza- 
tion session to always obtain the latest copy of modified 
objects. If it is turned off, the application may choose to 
use the local copy even though the client has reconnect- 
ed to the network. This provide flexibility to the applica- 
tions that want to sacrifice consistency to lookup the ob- 
ject quickly. 

[0020] Preferably the copies of data stored at the 
nodes comprise a copy of less than all the elements of 
a database, and the data comprises object oriented da- 
ta. An advantage of this is that it enables the quantity of 
data stored at the remote location to be limited, which 
again is advantageous for intermittently connected 
"thin" remote locations such as palmtop devices with 
limited memory capacity. An advantage of applying the 
method to object oriented data is that much data which 
mobile users wish to access remotely is already in such 
form. 

[0021] Preferably the method further comprises the 
step of propagating the more up to date copy from the 
remote client node to a second other node, which also 
has a copy of the portion of the data, when there is a 
connection mads with the second other node. An ad- 
vantage of this peer-to-peer model arising from synchro- 
nisation being propagated between neighboring loca- 
tions is that such a distributed approach provides an al- 
ternative path to direct connection to the server, and 
means the server need not keep track of all replicas of 
an objects throughout the network. This also enables 
the system to be scaled up more easily to handle more 
clients, or more data, or more functionality. 
[0022] Preferably the other node comprises the serv- 
er node. There is an advantage if the server is connect- 
ed directly, in that the server is assumed to hold a copy 



of every portion of the data, and so there will always be 
a copy to make a comparison with. This is not neces- 
sarily the case with other client nodes. Also, as there is 
more likely to be more access requests to the server 
5 than to any one of the clients, it is more important that 
the server be kept up to date, than any of the clients. 
[0023] Preferably the method further comprises the 
steps of storing in the remote client node, a record of 
transactions involving the remote copy before the com- 
io parison step; and 

remedying at least some of the transactions in the 
event that the local copy is determined by the compari- 
son step to be more up to date than the remote copy. 
This can reduce the harmful effects of data inconsisten- 
75 cy, and may reduce the burden on applications, or in- 
crease reliability, or enable the synchronisation require- 
ments to be relaxed. 

[0024] According to another aspect of the invention, 
there is provided a method of carrying out an operation 
on data stored in a network of nodes, one of the nodes 
comprising a server, and others of the nodes being client 
nodes, the nodes being connected intermittently, at 
least some of the data being cached at a remote one of 
the client nodes, the method comprising the steps of: 

initiating the operation at the remote client; 
causing a ^synchronisation of the cached data, the 
^synchronisation comprising the steps of: 

a) causing a reconnection to another of the 
nodes; 

b) receiving from that other node, information 
relating to a portion of the cached data of which 
there is a local copy at the other client, and a 
remote copy at the remote client node, the in- 
formation showing how up to date is the local 
copy; 

c) comparing at the remote client node, the in^ 
formation relating to the remote copy with cor- 
responding information relating to the local 
copy, to determine if the remote copy is more 
up to date than the local copy; and 

d) updating the remote copy based on the local 
copy, according to the result of the comparison; 
and 

completing the operation on the resynchronised 
cached data. 

[0025] According to another aspect of the invention, 
there is provided a client node arranged to use the 
above methods. 

[0026] According to another aspect of the invention, 
there is provided software stored on a computer reada- 
ble medium for carrying out the above methods. 
[0027] It is important to note that the architecture set 
out above is more suitable for ultra thin clients which can 
not afford to store extra transaction logs and replay the 
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logs to the server. It follows a distributed model, thus is 
more scalable than prior art frameworks. Also, if repli- 
cation granularity is at the root object level, a remote 
location database A may have rep licas of objects X and 
Y, whereas database B may have replicas of objects X s 
and Z, so it is more scalable. The architecture can be 
thread safe, and if it is built on top of any OODBM, as is 
preferred, it supports multiple concurrent application ac- 
cess to the database. By implementing the architecture 
in middleware, independent of the database, it is possi- io 
ble to adapt it for use with any existing database. Thus 
the flexibility and breadth of application is increased. 
[0028] Any of the preferred features may be com- 
bined, and combined with any aspect of the invention, 
as would be apparent to a person skilled in the art. is 
[0029] To show, by way of example, how to put the 
invention into practice, embodiments will now be de- 
scribed in more detail, with reference to the accompa- 
nying drawings. 

20 

Brief Description Of The Drawings 
[0030] 

Figure 1 shows a prior art arrangement; 25 
Figure 2 shows an overview of a network on which 
. an embodiment of the invention can be used; 
Figure 3 shows features of a client node for use in 
the network of figure 2; 

Figure 4 shows a schematic overview of a distribut- 30 
ed persistent storage (DPS) architecture according 
to an embodiment of the invention; 
Figure 5 shows another schematic overview of stat- 
ic features of a distributed persistent storage archi- 
tecture including an example of a client application 35 
that uses DPS; 

Figure 6 shows features of the service sublayer of 
figure 5; 

Figure 7 shows a schematic overview of compo- 
nents of the DPS middleware of figure 3; 40 
Figure 8 shows an example of run time actions of 
the application and the DPS middleware of figures 
3 to 7; 

Figure 9 shows the class hierarchy of a client appli- 
cation (Personal Phone List) that uses DPS; 4s 
Figure 10 shows in more detail the actions of the 
remote node of figure 9; 

Figure 11 shows in more detail the actions of the 

connection monitor of a remote node; 

Figure 1 2 shows a flowchart for a DPS lookup object so 

method; 

Figure 13 shows a flowchart for a DPS change ob- 
ject method; 

Figure 1 4 shows a flowchart for a DPS local change 
object method; ss 
Figure 1 5 shows a flowchart for a DPS create object 
method; 

Figure 16 shows a flowchart for a DPS local create 



object method; 

Figure 17 shows a flowchart for a DPS local delete 
object method; and 

Figure 18 shows a flowchart for a DPS delete all 
object method. 

Detailed Description 

Figure 1 - prior art transaction based client server 
method 

[0031] Figure 1 shows an illustration of the prior art 
"GoldRush" method in which client actions are illustrat- 
ed on the left, and server actions on the right. At 10, 
when the mobile clients are disconnected from the serv- 
er, an application on the client modifies objects in the 
local cache. A transaction log is kept, to record all trans- 
actions, at 1 1 . When a connection is made to the server, 
at 1 2, the transactions are replayed back to the server. 
As objects in the server come to be modified by the 
transactions, or read, tirnestampsof the client and serv- 
er copies are compared, at step 13, to see if the server 
copy had been modified in the meantime. At 15 the 
transaction is accepted if the server objects are un- 
changed, and if appropriate, the server copies are 
changed. Then at 1 6, the client is notified of acceptance, 
and the client side cache updated accordingly. 
[0032] Otherwise, if the transaction is rejected, as at 
1 7, the application is notified of the rejection, and may 
start conflict resolution procedures, at 18. 

Figure 2 - overview of a network 

[0033] Figure 2 shows in schematic form a network to 
which the present invention can be applied. Whereas a 
prior art client server based system would always need 
direct connections from the server to every client, for 
this embodiment of the present invention, clients may 
contact each other without going through the server. As 
can be seen, a server 20 is provided with links to client 
nodes using both fixed links and intermittent links such 
as wireless links. A base station 40 couples the wireless 
links to the server. Numerous client nodes 30 can be 
linked to the server, only four are shown for the sake of 
clarity. The client nodes could take the form of mobile 
telephones, or laptop computers linked by mobile tele- 
phones. Client nodes may be in contact with each other, 
according to the peer to peer model proposed for data 
replication and resynchronisation purposes at least. For 
other purposes, the client server model may follow more 
traditional lines. 

[0034] An example where client nodes may be inter- 
mittently interconnected, is where a palmtop computer 
has a wireless link to a laptop computer. The palmtop 
can access objects stored in the laptop, and may syn- 
chronise its data with that in the laptop. The laptop may 
have a wireless connection to other laptops, and ulti- 
mately to a remote server. 
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[0035] The server, although shown as a single entity, 
can also be distributed. Based on this peer-to-peer mod- 
el, "n" tier data synchronization and replication can be 
constructed. 

Figure 3 - client node overview 

[0036] The client nodes 30 shown in figure 2 can be 
seen to have three main layers of software, as shown 
in figure 3. Local data 70 may be stored in the form of a 
database, though other data structures could be envis- 
aged. Application software 50 makes use of the data via 
middleware 60. An example of an application might be 
a web browser Another example which will be dis- 
cussed below is an application for accessing and main- 
taining information such as lists of telephone numbers, 
or addresses. Many other applications can be envis- 
aged. The middleware will be referred to as a Distributed 
Persistent Storage mechanism. How it functions and in- 
teracts with other parts will be discussed in more detail 
below. 

Figure 4 - Conceptual Overview of a Distributed 
Persistent Storage (DPS) Architecture 

[0037] The conceptual model of figure 4 shows a "sim- 
plified view " of the functions of the Distributed Persist- 
ent Storage (DPS) system serving applications 51 ,59 on 
nodes on both a client side and a server side. The net- 
work boundary is shown to indicate that the client side 
is mobile and remote from the fixed parts of the network. 
Reflecting the peer to peer nature of the DPS, the func- 
tions of the DPS are essentially the same on the server 
node and the client node. 

[0038] The client application 51 should view the per- 
sistent storage 56 as a single entity though the database 
is actually stored across multiple servers 5B. In the ex- 
ample described below, the client/server model is cho- 
sen on the server side, that is the server or home loca- 
tion always stores the master copy of the Clients or 
(when the server is distributed also), visitor locations, 
store a replica of at least part of the database for greater 
local accessibility. The application can send requests to 
the persistent functions 53 and the replication functions 
55. Each can return data to the application. The persist- 
ent functions are able to handle basic operations such 
as lookup, create, delete, change, and soon, on the data 
stored in a persistent form. Such functions may use the 
replication functions, which enable the data to be stored 
in several places, to provide the advantages discussed 
above. The replication functions serve to maintain the 
various copies of data consistent. They make use of a 
look up table 54 for naming services. This enables us- 
ers, services, and objects ( if object oriented programs 
and data are used ), to be mapped to host and port iden- 
tifiers. 

[0039] Hosts are defined as machines identified by an 
IP address or name of the machine, and can have mul- 



tiple instances of DPS running as servers or clients or 
peers. Since each DPS server or client or peer uses a 
TCP port for data synchronization, a host may have as 
many DPS peers as the number of free TCP ports. 
[0040] As illustrated, the data synchronisation takes 
place by communication between the replication func- 
tions 55 of neighbouring nodes. As will be described in 
more detail below, such synchronisation sessions are 
initiated from one side, and there may be two independ- 
ent sessions 

Functional Design Considerations of one 
Embodiment of the Invention 
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IS [0041] 

a) Small Footprint - Code supporting the Data rep- 
lication mechanism must have a small memory foot- 
print both in persistently stored and executing 

^0 (RAM) forms. This will minimize its impact on the 
network server ROM and/or RAM requirements 
which are consistently being challenged due to the 
every increasing size of software. 

b) Thread-Safe - The mechanism must be thread- 
25 safe and therefore support Java threads. This is 

since many Java applets may be multi-threaded 
and each thread may make requests of the Data 
replication mechanism at the same time. 

c) Minimal Storage Overhead - Must be designed 
30 to have minimal fragmentation overhead of per 

"replicated data block 1 . Further, the storage over- 
head associated with the indexing scheme used to 
query for replicated data items must be kept to a 
minimum. 

35 d) Versioning of Data- Must support the ability to dis- 
tinguish the version of a given data item, possibly 
based on timestamp or version number. In other 
word, a specific number of versions ol replicated da- 
ta items must be stored and kept track of by this 
mechanism. 

e) Locking Capabilities on Shared Data - It is critical 
in practice to provide shared or exclusive locks on 
a data item which may be accessible by concurrent 
processes. This mechanism prevents data corrup- 
ts tion, and race conditions among concurrent proc- 
esses. More complex types of locks may be re- 
quired to optimize the locking algorithm, for exam- 
ple, shared intended exclusive locks. Since the data 
replication algorithm can request a resource while 

so it holds a set of locks on other resources, deadlock 
situation can occur among data synchronization 
processes. Thus, data replication mechanism must 
prevent deadlock situations. 

f) Data Corruption Handling or Fault Tolerance - 
ss Must provide the ability to back out corrupted data 

and their associated information. Data corruptions 
may be caused by system reset, power failure, net- 
work connection time-outs. This capability relies 
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heavily on the ability to support versioning. 

g) High Availability and Consistency of Replicated 
Data - The purpose of data replication is to provide 
highly available data while preserving data consist- 
ency to distributed clients. The goal of maintaining s 
data consistency conflicts with providing highly 
available data. Consistency allows access to con- 
sistent replicas only; availability improves if any rep- 
licas can be accessed. In reality the cost of main- 
taining consistency of replicated data is proportion- to 
al to the availability of the data (e.g. cost = square 
(number of instances of each replicated data)). Fi- 
nally, this capability relies heavily on the ability to 
support versioning, and locking. 

h) Internal Exception Handling - The Data replica- ts 
tion mechanism has its own internal states while it 

is active. It must handle its exception cleanly so data 
corruption can be avoided. This capability ties in 
with the corruption handling function. 

i) Scalability - The Data replication mechanism must 20 
not be restricted by the size of network, such as 
number of clients. A designer must be able to add/ 
remove/replace any desirable or optional function- 
alities to/from the system. 

j) Transparency - Although the administrator may ^ 
want to change the replication strategy, the users 
of this mechanism need not be aware of how the 
data are being stored and accessed across the net- 
work. From the user point of view, a data item exists 
only as a single instance of a network entity in any 30 
given context. Therefore, the application interface 
must be designed as transparent" as possible, 
k) Strongly Consistent Read Access - Whenever a 
client requests to read a data item, the data item 
must be the most recent version returned from the 35 
persistent storage. While a mobile client is reading 
a locally-stored replicated data, other mobile clients 
will not be able to read/update the data item until 
the read operation is complete. This implies if the 
client reads a data item, all instance of the data item 40 
must be exclusively locked until the read operation 
is complete. It severely reduce the availability of the 
data item, thus unsuitable to highly mobile system. 
However, this functionality must still be available to 
the clients if they decide it is important. This mech- 45 
an ism relies heavily on the requirements for ver- 
sioning, locking, and high availability of data. 
I) Weakly Consistent Read Access - If a client re- 
quests to read a data item, the data item may be an 
older version of the replicated data item. While a so 
mobile client is reading a locally-stored replicated 
data, other mobile clients may read/update the oth- 
er replicas of the data item. This increases the read 
availability of the data item. This is suitable to highly 
mobile system because most data accesses in a ss 
distributed system are read access, thus data avail- 
ability greatly affects the network performance. 
Since instantaneous read consistency is not guar- 



anteed in this model, the clients must use this func- 
tionality at their discretion. Although the data is not 
instantaneously consistent during the access, all 
replicas must eventually become consistent. This 
mechanism relies heavily on the requirements for 
versioning, locking, and high availability of data, 
m) Strongly Consistent Write Access - Whenever a 
client requests to write a data item back to the per- 
sistent storage, the data item will become the most 
recent version in the persistent storage. While a mo- 
bile client is updating a locally-stored replicated da- 
ta, other mobile clients will not be able to read/up- 
date the data item until the write operation is com- 
plete. This implies if the client reads a data item, all 
instance of the data item must be exclusively locked 
until the write operation is complete. It severely re- 
duce the availability of the data item, thus unsuita- 
ble to highly mobile system. However, this function- 
ality must still be available to the clients If they de- 
cide it is important. This mechanism relies heavily 
on the requirements for versioning, locking, high 
availability of data, and weakly consistent read ac- 
cess. 

n) Universal Data Replication - A network may be 
partitioned into different data replication subsys- 
tems. Replicas may be stored across these subsys- 
tems on the network. These subsystems may not 
be the same version, but the newer versions of the 
data replication subsystems must be backward 
compatible with the older versions. Also, data must 
be replicable and accessible on any node of these 
subsystems. 

o) Referential Integrity - All references to a replicat- 
ed data item or object must be consistent. That is, 
if a new instance of the replicated data item is cre- 
ated in the system, updates to all replicas must be 
consistent with the new replica. If a replica is delet- 
ed from the system, references to the obsolete rep- 
lica must be removed from the system as well. 

[0042] Other functionality to be considered includes: 

p) Simple API - The persistent storage mechanism 
should be easy for Java applet programmers to un- 
derstand and use. 

q) Fast Read/Write Capability - Should provide 
small read/write latency to support the design of ap- 
plets that deal with persistent storage and perform 
at optimal speeds. 

r) Minimal Persistent Storage Overhead - Should be 
designed to have minimal fragmentation overhead 
of persistent storage. Further, the persistent stor- 
age overhead associated with the indexing scheme 
used to query for stored data items must be kept to 
a minimum. 

s) Compressed Storage Option - Should provide 
support to be configured to store its data in com- 
press form transparent to the user. This will optimize 
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the persistent storage usage (possibly at the ex- 
pense of reduced access speeds), 
t) Efficient Retrieval - Should provide an efficient 
way to locate a given data item and prepare it for 
reading and/or writing. s 
u) Synchronous/Asynchronous/Future Return Of 
The Result - If a synchronous request for a valid 
operation of data replication (e.g. read/write) is 
made, the interface call will not return (with/without 
return code) until the execution of the operation is io 
complete. If an asynchronous request is made, the 
call will return as long as it is in valid context. If a 
future (luture asynchronous) request is made, the 
call will return as long as it is in valid context, and 
the return code is available when the execution is 75 
complete. 

v) Intelligence - The Data replication mechanism 
may have the intelligence (either static, dynamic, or 
adaptive) to optimize for storage, load balancing, 
cost. This could be achieved by setting storage lim- 20 
its, forcing early reconnection, choosing to delay re- 
connection to busier nodes etc. Static intelligence 
is added during the code compilation of Data Rep- 
lication's system. Dynamic intelligence may be add- 
ed in by the administrator at real-time, whereas 2s 
adaptive intelligence has the ability to change the 
behavior of the system by learning the facts gath- 
ered at real-time. 

The Client-side Persistent Data Storage Mechanism 30 

[0043] A file system is one possible approach. How- 
ever, it is not preferred because it is not suited to storing 
objects, and because overhead is imposed due to frag- 
mentation of the storage medium, and directory struc- 35 
tures, 

[0044] A database approach is better than the file sys- 
tem's approach because a database is a persistent stor- 
age. In addition to data consistency, database also of- 
fers a variety of functionalities: Query, Maintenance, <o 
Replication, and Fault Tolerance. For these reasons, da- 
tabase is a better choice for long term. However, if the 
client needs a ultra thin persistent storage, the file sys- 
tem solution may be a viable alternative. Given a choice 
between a traditional relational database, such as Ora- & 
cle or DB2, and an OODB, the OODB is preferred, be- 
cause the mapping of JAVA objects to OODB is very 
simple and elegant. There is no need to write extra code 
to map objects onto a relational database table. Also, 
object locking is a common capability of an OODB. An so 
example of an OODBM for JAVA is ObjectStore 5.0 with 
JAVA interface. 

Basic DPS Functionality 

ss 

[0045] A basic embodiment of the Distributed Persist- 
ent Storage (DPS) for at least one client node and a 
server node could include the following functionalities: 



a) Persistent Storage of Objects between servers 
of different geographical locations. 

b) On the server side, if it is distributed, as well as 
the client side, there is a concept of home versus 
visitor databases. A master copy of the database is 
stored at the home server and the slave copies are 
stored at the visitor servers. 

c) The master copy is cached locally to the visitor 
nodes when the mobile client tries to access the da- 
tabase. 

d) Changes made at a master or visitor node must 
be propagated back to replicated nodes. 

e) The movement of an user is tracked in a user 
location registry which is stored persistently in the 
database. 

f) A mobile client can be disconnected from the net- 
work for a long period of time. It can access the da- 
tabase through the home or the visitor node, usually 
wherever is closest geographically. A local copy of 
the database is cached on the mobile client and 
may be modified while the client is disconnected 
from the network. 

g) Data ^synchronization of the mobile clients is 
performed upon reconnection. Since a mobile client 
is usually the one that initiates the connection to the 
server, data resynchronization should also be initi- 
ated or triggered by the client as well. On the other 
hand, the server may also initiate the connection to 
its clients and data synchronization can also be in- 
itiated or triggered by the server. This is analogous 
to the push-pull technology available on known cli- 
ent/server frameworks, but is much more scalable 
because it is based on a distributed model. 

The conflict resolution policy for data resyn- 
chronization is to replace the older version of the 
data with the newer version based on its modified 
time. This policy is chosen for simplicity/more com- 
plex, policies can be envisaged, which may be more 
appropriate, according to the needs of the applica- 
tions. If the versions are the same but the replicas 
are different, a notification would be sent to the two 
synchronizing nodes and no change would be made 
at either end. When the client is disconnected from 
the network, modified objects are tagged dirty and 
would be forced to resynchronize with the server 
upon reconnection. 

h) The "dirty" objects on the mobile client have the 
highest priority in resynchronization. 

[0046] To demonstrate the distributed aspects of per- 
sistent storage, the disconnected client's implementa- 
tion will have a finer replication granularity: Different root 
objects in a database may have a different geographi- 
cally replication strategy. 

Figures 5, 6, and 7 - Static Model of the DPS 

[0047] DPS middleware consists of three layers be- 
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low the application: Abstraction, Concurrency, and Da- 
tabase. The Abstraction Layer 62,64,66 serves to pro- 
vide abstraction to the persistent storage's structure, 
customized services, and software hooks to enhance 
the availability ot the third party database capabilities to 
the application. It comprises a service sublayer 66, a da- 
tabase independent sublayer 62, and a handle sublayer 
64. The Concurrency Layer 68 is intended to provide 
customized database concurrency control to the appli- 
cation, such as muiti -thread access to the database, 
joined transaction among multi-reader threads and sin- 
gle writer thread. The Database Layer 70 is simply a 
third-party database. The database may be an object- 
oriented database (OODB) or relational database 
(RDB). The layering is intended to isolate the application 
from the underlying persistent storage structure. In the 
example of the static model shown in the figure, it may 
be represented by Root_PS. It contains the code to per- 
mit multi-thread access to a single database. The strat- 
egy is to serialize individual transaction of each thread 
(Multiple Readers or a single Writer) into a single trans- 
action. Although it does not provide the best data access 
concurrency to the threads, it is a good solution to over- 
come a deficiency of OODBs such as ObjectStore. 
[0048] The Service Sublayer is made up of different 
types of persistent storage services. Some basic serv- 
ices supported are: Replication 67, Connection Monitor 
and Resynchronisation 105, and Conflict Resolution 69. 
The Replication service provides data or object replica- 
tion across the distributed persistent storage system.. 
The Conflict Resolution service is provided to resolve 
inconsistent updates among disconnected clients. A ba- 
sic strategy for this is to replace the older version of an 
object with the newer version locally in the resynchroni- 
sation phase, which is adequate for thin clients. More 
advanced conflict resolution techniques are well known, 
and could be implemented as desired. The Connection 
Monitor Service provides to both the persistent storage 
and the application a way to monitor the state of con- 
nections to other nodes, and perform resynchronisation 
when appropriate. It could be implemented as a thread 
or as a method called by others. The service is assumed 
to have access to the state of the connection on the host 
machine, thus can provide DPS or the application away 
to control data access based on the state of the connec- 
tion between the hosts. 

[0049] The Database Independent Sublayer is intend- 
ed to hide the actual database structure from the appli- 
cation. From the application's point of view, a database 
that it creates is a single logical entity. It should be ac- 
cessible the same way regardless the geographical lo- 
cation of the mobile clients, in the static model, for an 
example of a telephone listing application, this sublayer 
could be represented by PhoneList_PS, or 
UserProfile_PS (or application object>_PS), as is 
shown and will be discussed below with reference to fig- 
ure 9. It provides a handle to the actual distributed da- 
tabase. The functions of these and other parts will be 



described in more detail below with reference to the dy- 
namic model shown in figure 8. 
[0050] The Handle Sublayer provides (persistent 
aware) handles to all persistent capable objects in the 
s database. 

[0051] If the instances of a class can operate on per- 
sistent objects but cannot themselves be stored in DPS 
database then the class is persistence-aware. If you can 
store an object in a DPS database then the object is per- 
io sistence-capable. If you can store the instances of a 
class in a database then the class is persistence-capa- 
ble. It hides the actual data access mechanism to the 
object from the application. This is necessary because 
hooks can be added in to permit transparent access to 
is persistent storage services, such as, object replication. 
If the V operator in JAVA can be overloaded, then this 
sublayer can made more transparent than it is now. An 
example of a handle object is: PhoneListH, as will be 
discussed below with reference to figure 9. 
20 [0052] Another view of some of the components of the 
DPS middleware for a client node is shown in figure 7. 
Some components 75 are duplicated to provide one for 
each database, and there may be several databases, 
used by different applications, or by the same applica- 
25 tion. A replication registry 90 keeps a record of what ob- 
jects in its database are replicated on neighbouring 
nodes, with the identity of those nodes. 
. [0053] The replication registry could be implemented 
as follows. For each object two mappings are main- 
30 tained. A first mapping gives a direct lookup of the stor- 
age ID of the objects based on object name, host name 
port ID. A second mapping is provided to give a direct 
lookup of the port ID of the object, based on object 
name, storage ID and host name. It is necessary to ob- 
35 tain the port ID to enable a connection to be made. It is 
necessary to obtain the storage ID in case there are mul- 
tiple replicas of the same object on the same host, e.g. 
if redundancy is provided. Providing two mappings en- 
ables faster lookup to be achieved. 
40 [0054] A list of objects 100 is a list of the identity of 
objects cached in the database at the client node. A dirty 
object bin 80 is provided to record all those objects 
cached locally which have been altered while the node 
is disconnected. Maintaining such a record makes it 
^5 easier to identify which objects need resynchronisation 
when a connection is made. It can be implemented as 
a First In First Out ( FIFO) mechanism, to maintain the 
order of entries. One altered object can cause multiple 
entries in the bin, so that there is an entry for each rep- 
50 jication of the object on different neighbouring nodes. 
This can be achieved using the information in the repli- 
cation registry. Then, as resynchronisation takes place 
with each of the neighbouring nodes, the corresponding 
entry in the bin can be removed while leaving the entries 
55 relating to nodes not yet connected. 

[0055] The control functions for carrying out the re- 
synchronisation following the peer to peer model/are 
shown as 115. They make use of the components 75 
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described above, and corresponding components 85 for 
another database. A table 110 of the state of connec- 
tions to neighbouring nodes is also shown. 

Figure 8 - Dynamic Model $ 

[0056] The dynamic model shown in figure 8 illus- 
trates the run-time behaviors of DPS and an application. 
The actions of the application are illustrated on the left 
side, and those of the DPS middleware, distributed over to 
the client nodes and the server, are illustrated on the 
right side. The actions can be separated into three parts, 
initialisation, connection changes, and executing oper- 
ations on the data. 

[0057] The invocation of an object persistent primitive is 
initiates message exchanges between two replicated 
nodes. This exchange may be viewed as a "virtual object 
persistent session" between two persistent object data- 
bases. To ensure the session behaves appropriately; 
the application must configure the replication registry 20 
with accurate replication entry information. 
[0058] Since mobile clients do not have stable con- 
nection, DPS is designed such that the mobile clients 
can trigger the activation of its DPS session. In practice, 
it would be the mobile client (wireless phone) that initi- 2s 
ates (e.g. roaming) service requests. Thus, this archi- 
tecture is consistent with the behaviors of real-world mo- 
bile clients. However, the server may trigger the activa- 
tion of its DPS session to its clients as well. This way, 
this invention offers maximum flexibility to the mobile 30 
system designer. 

[0059] To maintain consistency of replicated objects, 
the synchronization algorithm relies on its interaction 
with the connection table and the replication registry. 
[0060] The initialisation actions will be described first. 35 
Following database initialisation at 118, the application 
obtains a database handle (PhoneList_PS t in the exam- 
ple discussed below with reference to figure 9) in the 
current thread at 1 20. The DPS initialises the database 
handle with links to the connection table and replication *o 
registry at 122. The application then uses the database 
handle to lookup or create the root object. The database 
handle returns the corresponding object handle to the 
application. The application must use the interfaces of 
the object handle to access the respective object. These 
handles contain all the necessary knowledge to interact 
with the core DPS software. The DPS initialises the ob- 
ject handle with links to the database and connection 
table handles at 126, ( as illustrated in figure 9). The 
application updates the replication registry and binds all so 
replication entries of replicated objects to the registry at 
128. Finally, at 130, the DPS binds entries to the data- 
base. 

[0061] According to the needs of the application, or 
applications, they may initiate connections to other ss 
nodes, as shown at 132. The DPS reacts by updating 
the connection table at 134. 

[0062] When an application wants to carry out an op- 



eration on the data stored at the server, or cached lo- 
cally, it will call a DPS primitive, such as create, change, 
lookup, cache, delete, and so on. This is shown at 1 36. 
This causes the DPS to determine at 138 if it is a local 
primitive or API (Application Programming Interlace), 
and if so, begin execution. If it is a remote primitive then 
a remote method invocation mechanism would be used 
to enable the operation to be executed remotely, e.g. on 
the server. As will be described in more detail below, 
some operations will include a resynchronisation of the 
cached data Where this takes place, the DPS will check 
the dirty bin, and force resynchronisation of dirty objects, 
where there is a connection to a neighbour having a rep- 
lication of such objects. When it has been through the 
dirty bin, the DPS will force synchronisation of objects 
currently being used, but not yet having an entry in the 
dirty bin. After any necessary resynchronisation, at 1 39, 
the application processes the returned results and any 
exceptions. 

Figure 9 - Class Hierarchy 

[0063] An object oriented class hierarchy for imple- 
menting one embodiment of the invention is shown in 
figure 9. The classes or objects are explained as follows: 
[0064] Root_PS, 1 42, is a persistent aware object that 
provides the Database-Independent Abstraction sub- 
layer to the application. It maps directly to a database 
and also contains the concurrency layer functionality 
that permits multiple threads access to the database ' 
concurrently in the user's point of view". 
[0065] DRoot_PS, 144, extends Root_PS capabili- 
ties; it offers distributed persistent storage to the appli- 
cation. Each database stores a copy of its replication 
registry which is crucial in determining the replication 
strategy at the current node. PhoneList_PS, 146, is the 
application-specific DPS's handle for a phone list appli- 
cation. 

[0066] PhoneListCore, 148, is a persistent capable 
class. It contains the non-U! (non-UI means it does not 
contain any User interface components of the personal 
phone list) component of the core of the PhoneList, 161, 
(the Ul version of a phone list). PhoneListCore is the 
root object class for Phone List_PS. PhoneListSerial- 
Core, 164, is an object wrapper for PhoneListCore. This 
wrapper allows PhoneListCore to be serialized (e.g. for 
DPS's RMI). Since present OODBs such as Object- 
Store's objects are not serializable, this class is created 
to work around this limitation. 
[0067] PSReplicationRegistry.166 is the replication 
registry for DRoot_PS. It contains these members: ob- 
ject, host name, port number, location id. A replication 
node is an unique <host name, port number> pair. Each 
node has a replica of the object, therefore it provides 
maximal flexibility in object replication. Currently, the 
root object's key (which is a String) is mapped onto the 
registry instead of the object itself, in the case of the 
phoneList application, the root object is a personalized 



10 



19 



EP 0 926 608 A2 



20 



telephone list mapped to unique key string which is the 
owner of the telephone list. 

[0068] PSConnectton Table, 168, is created to store 
the connection state ot nodes with their neighbours. The 
endpoints ot a connection are the host names of the two 
DPS nodes. This table is updated by the Connection 
Monitor or applications which know the connection state 
of the local host. The state may be connected or non- 
connected. If node B does not have an entry in the con- 
nection table ot node A, this means B and A are not 
neighboring nodes. With the application updating the 
state of its connection, the system can operate in the 
real world ol wireless mobile clients. The connection ta- 
ble is not persistent aware or capable because connec- 
tions between mobile clients or servers are run-time 
events. 

[0069] Handle, 1 43, is the class that provides the Han- 
dle Sublayer abstraction to the application. DHandie, 
145, extends Handle to provide the distributed persist- 
ency to the application. To provide efficient computation, 
DHandie has an implicit reference (not shown) to its da- 
tabase handle, since PhoneListH inherits from Dhandle, 
and PhoneList_PS inherits from DRoot_PS, so data- 
base APIs can be accessed faster. In the case of a dis- 
connected mobile client, its distributed persistent stor- 
age framework is built on top of the server framework. 
DRoot_PS, DHandie are provided to provide true dis- 
tributed object storage capability. PhoneListH, 149, is 
an example of a handle object, for the phone list appli- 
cation. It has references to PhoneListCore, and to 
PhoneList_PS. PhoneListH contains the necessary per- 
sonal phone list interfaces for the user, such as add/de- 
lete/change/scan/lookup a phone entry, the implemen- 
tations of the interfaces hide its interaction with DPS 
from the user. 

[0070] DirtyObjectsBin, 147, is a persistent capable 
Hashtable that stores all the modified objects which 
need to be resynchronized with other replicated nodes. 
If an object is to be hashed to a hashtable, a unique hash 
code (e.g. long integer) will be assigned based on the 
value of the object. The hashcode serves as an index 
to lookup the object. The hashtable consists of a finite 
set of hash buckets which may be mapped to more than 
one hash code. The mapping is computed based on a 
pre-set hash function. Therefore, each hash bucket may 
contain multiple hash entry which store each unique 
hashed object. Each database has one dirtyObjectsBin. 
During a reconnection, objects in the dirtyObjectsBin 
are forced to be resynchronized first. When an object 
finishes its resynchronization, it is removed from the 
hashtable. 

Figure 10 - Resychronisation Actions Between 
Nodes 

[0071] The principal steps in one embodiment of the 
resynchronisation process are shown in figure 10, for 
any two nodes, which will lor convenience be referred 



to as a local node and a remote node. The steps per- 
formed at the local node by the monitoring and resyn- 
chronisation functions are shown at the left side, and 
those for the remote node are shown at the right side. 
5 At 140, the local node awaits a connection. Once a con- 
nection is detected : the remote node checks its replica- 
tion registry, to see if the connected node has a copy of 
any ot the objects cached at the local node, if so, at 150, 
the local node sends a note of how up to date are the 
io local copies of one or more such objects, to the remote 
node. Preferably this is carried out only for those objects 
the local node has changed. The remote node can then 
compare this information with corresponding informa- 
tion for its copies of these objects, at 1 52. 
is [0072] If the remote node finds that the remote copy 
is more up to date, ft will send a copy ( or details of the 
differences ) to the local node, at 1 54, to enable it to up- 
date its copy, at 1 56. The local node can then propagate 
the change to other nodes in a similar fashion. Also, at 
20 this point, conflict resolution in the local node can be 
commenced if necessary. This may be facilitated if the 
local node has been keeping a record of transactions 
using the objects which have been altered. Preferably 
also the record covers objects which have been ac- 
2$ cessed but not changed, in case they had been changed 
by another node, and were out of date when accessed. 
[0073] If the remote node finds the local copy is more 
up to date, it will update its own copy at 158, by request- 
ing the necessary information from the local node. If the 
30 remote copy and local copy are of the same date or ver- 
sion, the local node is notified at 160. The process is 
repeated at 162 until all the local data is synchronised. 
The same sort of process can be carried out for all the 
objects the remote node has changed. This could be 
35 carried out as part of the above process, by having the 
remote node advise the local node which objects have 
been changed at the remote node. However, it is pref- 
erably carried out as a parallel independent process in- 
itiated by the remote node, and following exactly the 
40 same steps as above, but with the remote and local 
nodes transposed. This adheres closer to the peer to 
peer principle, which makes for improved scalability, 
and easier implementation, if all nodes are the same and 
need a minimum of initial adaptation. 
45 [0074] The information on how up to date the data is 
can be a version number, or a time stamp, for example. 
For object oriented data, whenever an object's at- 
tributes, or its attributing objects are changed, it's ver- 
sion or timestamp should be changed. Various ways can 
so be envisaged, to achieve this. If the object subscribes 
to all its attributing objects, whenever a change in those 
attributing objects occurs, the objects version number 
can be incremented, or it's timestamp updated. Alterna- 
tively, a global version control manager can be imple- 
ss mented, which maintains a tree-like call graph of all the 
objects. A change in one object causes the manager to 
trigger updates in all parent objects caught by an upward 
traverse up the tree-like call graph. 
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Figure 11 - Resynchronisatton Actions at the 
Remote Node 

[0075] A more detailed flowchart of the remote node 
actions shown in figure 10, is shown in figure 11. After s 
waiting for a connection at 170, an item from the local 
node dirty bin is received at 1 72. The remote node locks 
the copy of the relevant object at the remote node, at 
174. At 176, it is determined if the item is a delete all 
operation. If so, then a local delete method is called, to io 
delete the copy in the remote node, then the next item 
received from the local node dirty bin is examined. If it 
is found that the item is not a delete all operation, then 
at 1 52 the version ortirnestamp information is compared 
to see if the remote node copy is out of date. If so, at is 
178, the copy in the remote node is updated, by calling 
a local change method. More details of this method will 
be explained below. Otherwise, this step is bypassed. 
Any fail or exception occurrences are detected at 180, 
and notified to the local node at 1 82, and the local node 20 
dirty bin entry is left uncleared. At 184, successful up- 
dating is notified to the local node, and at 186, the rele- 
vant object is unlocked in the remote node. 
[0076] The principal steps involved when performing 
operations on an object which may be cached locally, 25 
and need synchronising, will now be described. These 
methods may be called by applications, or, as shown 
above, some may be called as part of DPS functions, 
such as resynchronisation. Generally, an application 
would not be able to use the local operations, only the 30 
global ones, otherwise the resynchronisation could be 
overridden by applications, and consistency could not 
be guaranteed. 

Figure 12 - Object Look up Flowchart 35 

[0077] A method 200 for a lookup operation on object 
A begins with the step 205 of checking that there is a 
connection to the relevant node, e.g. the server, and 
checking if a greedy bit is set. This bit indicates whether 40 
it is desired to look beyond a locally cached version of 
the object, to find a more up to date copy elsewhere. It 
may be set by the user, by an application, or by other 
parts of the DPS, e.g. to adapt the DPS dynamically to 
changing conditions, e.g. network congestion. If the 
conditions at 205 are not satisfied, a local lookup meth- 
od is called at 225. Otherwise, the local copy of the ob- 
ject A is locked at 21 5. A timestamp or version indication 
is sent to a connected neighbouring node at 235, and 
responses are processed at 245. If the local copy is out so 
of date, a local change object method is called at 255. 
Otherwise this step is bypassed. At 265, it is determined 
if all connected neighbours have responded. If not, the 
process may be repeated until all have responded. Find- 
ing no more up to date copies will result in the local copy ss 
being accessed. Exceptions or fails during the operation 
will also result as shown at step 227, in the local copy 
being accessed. Otherwise, the most up to date copy is 



returned at 275. 

Figure 13 - Change Object Flowchart 

[0078] A method 300 for a change operation on object 
A is shown in figure 13, and begins in a similar way as 
for the lookup operation, with a checking step 305, and 
a locking step 31 5. If the conditions at 305 are not sat- 
isfied, a local change method is called at 325. There is 
also a corresponding step 335 of sending a timestamp 
to a neighbouring node, and responses are processed 
at 345. If the local copy is out ol date, a local change 
object method is called at 355. Otherwise this step is 
bypassed. At 365, it is determined if ail connected neigh- 
bours have responded. If not, the process may be re- 
peated until all have responded. Finding no more up to 
date copies will result in the local copy being changed, 
at step 325. Exceptions or fails during the operation will 
also result as shown at step 227, in returning without 
changing the local copy. In any case, the method returns 
at 375. 

Figure 14 - Local Change Object Flowchart 

[0079] A local change object method 400 begins by 
locking the local copy of the object A at 415, At 425, the 
object is replaced in the database by object A'. The 
timestamp or version of object A is changed to reflect 
the time or vers ion of object A\ at step 435, without using 
the current time, or incrementing the version number be- 
yond that of A'. At 445, A' is hashed into the dirty bin, 
and the lock on A is released at 455. At 465 the method 
returns. Exceptions or fails during the operation will re- 
sult as shown at step 227, in returning without changing 
the local copy. 

Figure 15 - Create Object Flowchart 

[0080] A create object A method 500 begins with a 
check step 505 similar to that in the lookup operation. If 
the conditions at 505 are not satisfied, a local create 
method is called at 515. Otherwise, a local timestamp 
for the new object is set at the current time at 525. There 
is also a corresponding step 535 of sending a timestamp 
to a neighbouring node, and responses are processed 
at 545. If another node has created the same object in 
the meantime, no new object is created, and the remote 
copy can be used. Otherwise, the focal change object 
method is called at 515. Otherwise the method returns 
without creating a new instance. Exceptions or fails dur- 
ing the operation will also result as shown at step 227, 
in returning without creating a new instance. 

Figure 16 - Local Create Object Flowchart 

[0081] Figure 16 shows a local create object A meth- 
' od 600. A timestamp for the object is set first at 605, to 
the current time. An instance of the object A is created 
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next in the local database, at 615. At 625, the object A 
is locked in the local database. It is hashed into the dirty 
bin at 635, unlocked at 645, and the method returns at 
655. 

Figure 17 - Local Delete Object Flowchart 

[0082] Figure 1 7 shows a local delete object A method 
700. An instance of the object A is created next in the 
local database, at 615. At 705, the object A is locked in 
the local database. It is removed from the database at 
715. Hash entries in the dirty bin are removed at 725, 
the object is unlocked at 735, and the method returns at 
745. 

Figure 18 - DeleteAII Object Flowchart 

[0083] A delete All method 800 is for deleting all copies 
of an object. It begins with calling at 805 a local delete 
method. A deleteAil request is added to the dirty bin at 
815, and the method returns. 

An Example of an Application 

[0084] A personalized telephone list application can 
be used to show the distributed aspects of persistent 
storage whose contents may be cached locally. Since 
DPS is designed to be very scalable, each client may 
"communicate or link" to as many clients as the system 
resource permits. The ability of the client to drive the 
^synchronization demonstrates that this DPS architec- 
ture matches one advantage of known client/server 
push and pull technology. 

[0085] The phone list can be an applet running under 
a viewer application. Each user can have its own phone 
list(s) which is identified by the user name. Phone en- 
tries may be added, deleted, modified, sorted, and que- 
ried. Connection between may be simulated by toggling 
the connection button. Such an application is particular- 
ly suited to the ^synchronisation strategy described 
above, because it is handling data which needs to be 
consistent eventually, and for which availability is a high 
priority, yet instant access to the most up to date remote 
information is a lower priority. 
[0086] The prior art centralised transaction based 
strategy may not be suitable for ultra thin client nodes 
because replaying long transaction logs back to the 
server from the client upon reconnection would not work 
well when the reconnection time is short and precious. 
Most of the time, a thin mobile client heeds only very 
simple and light data ^synchronization to maintain its 
data consistency. In this case, the distributed strategy 
of the invention is advantageous. 

An Example of Client Node Hardware and 
Connection Protocols for the Network 

[0087] The client node device could be a notebook 



computer based around e.g. a 32 bit processor with e. 
g. 8MB of RAM, capable of running Java based pro- 
grams, and having cellular wireless telephone hard- 
ware, for data and optionally voice communication with 

5 the public telephone network, and with internet service 
providers (ISP), or with servers provided by the cellular 
network operator, to enable data services to be provided 
for example. A user may try to access his/her personal 
phone list on the cellular phone or PCS. A notebook 

io computer may have a docking station for the wireless 
phone. When the phone is docked on the notebook com- 
puter, the PCS's phone list may resynchronize its data 
with the personal phone list stored on the notebook. 
When the user returns the notebook to an area where 

75 the it can synchronize its data with the ISP through the 
wireless basestation, the notebook may synchronize the 
modified personal phone list with the phone list stored 
on the server which is maintained by ISP. 

20 other Variations 

[0088] A notification service may be added for notify- 
ing the application of results. A mix of transaction based 
and last modified based synchronization may be used 

25 in the framework described above. Although the appli- 
cation has been described with regard to object oriented 
data, clearly it is applicable to data stored in other ways. 
Although mobile wireless connected client nodes have 
been described, it is clear that the advantages of the 

30 invention may also be applicable to other types of de- 
vice, e.g. network computers connected periodically by 
telephone/modem or other non wireless link, to a net- 
work. Instead of the dirty bin arrangement described 
above, the information on what has been changed could 

35 be ascertained by looking at all the cached objects, 
when needed, by comparing timestamps with a time of 
last ^synchronisation, for example, though this may be 
impractical if there are many cached objects. Although 
a connection table is maintained, it would be conceiva- 

40 ble to ascertain the state of connections on demand 
without maintaining a table. 

[0089] In summary, the present invention provides a 
method of maintaining mutual consistency between 
copies of data stored at nodes in a network, the nodes 
45 comprising a server node, and a number of client nodes 
at remote locations, such as laptop computers linked by 
cellular telephone connections, the nodes being con- 
nected intermittently. 

[0090] Following a reconnection between the remote 
so client node and another of the nodes, timestamp infor- 
mation on objects cached at the other node, is sent to 
the remote client node. At the remote client node, the 
timestamp information is compared with corresponding 
information relating to the local copy, to determine if 
55 each of the cached objects is more up to date than the 
local copy. The cached objects are updated based on 
the local copy, according to the result of the comparison. 
This peer to peer resynchronisation means that the 
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server need not monitor and control the process, so the 
system is more easily scaled up to handle more clients. 
[0091] Other variations as well as those discussed 
above will be apparent to persons of average skill in the 
art, within the scope of the claims, and are not intended s 
to be excluded. 

Claims 

10 

1. A method of maintaining mutual consistency be- 
tween copies of data stored at nodes in a network, 
the nodes comprising a server node, and a number 
of client nodes at remote locations, the nodes being 
connected intermittently, the client nodes compris- is 
ing applications which make use of the data, the 
method comprising the steps of, at a remote one of 
the client nodes: 

following a reconnection between the remote 20 
client node and another of the nodes, receiving 
from that other node, information relating to a 
portion of the data ol which there is a local copy 
at the other client, and a remote copy at the re- 
mote client node, the information showing how 25 
up to date is the local copy; 
comparing at the remote client node, the infor- 
mation relating to the remote copy with corre- 
sponding information relating to the local copy 
to determine if the remote copy is more up to 30 
date than the local copy; and 
updating the remote copy based on the local 
copy, according to the result of the comparison. 

2. A method as claimed in claim 1 , further comprising 3S 
the step of determining if the content of the remote 
copy is the same as the content of the local copy, 
and initiating at the remote node, a conflict resolu- 
tion process in the event that the comparison does 

not reveal a difference between the local copy and *o 
the remote copy, but the respective contents differ. 

3. A method as claimed in claim 1 or claim 2, further 
comprising the preliminary steps of, during a dis- 
connection, recording which portions of the local ^ 
copy have been modified at the other node, wherein 

the information received by the remote client node 
relates to the portion recorded by the other node as 
having been modified. 

so 

4. A method as claimed in claim 3, wherein the com- 
parison step is carried out for each of the recorded 
portions, modified during the disconnection, before 
carrying out the comparison step for a portion mod- 
ified subsequent to the reconnection. ss 

5. A method as claimed in any preceding claim, further 
comprising the step of locking the remote copy to 



prevent access to it during the comparison step. 

6. A method as claimed in any preceding claim, further 
comprising the preliminary step of determining 
whether to use the remote copy, according to 
whether the information relating to the remote copy 
has been received at the first of the clients. 

7. A method as claimed in any preceding claim, where- 
in the copies of data stored at the nodes comprise 
a copy of less than all the elements of a database, 
and wherein the data comprises object oriented da- 
ta. 

8. A method as claimed in any preceding claim, further 
comprising the step of propagating the more up to 
date copy from the remote client node to a second 
other node, which also has a copy of the portion of 
the data, when there is a connection made with the 
second other node. 

9. A method as claimed in any preceding claim, where- 
in the other node comprises the server node. 

1 0. A method as claimed in any preceding claim, further 
comprising the steps of storing in the remote client 
node, a record of transactions involving the remote 
copy before the comparison step; and 

remedying at least some of the transactions 
in the event that the local copy is determined by the 
comparison step to be more up to date than the re- 
mote copy. 

11. A method of carrying out an operation on data 
stored in a network of nodes, one of the nodes com- 
prising a server, and others of the nodes being client 
nodes, the nodes being connected intermittently, at 
least some of the data being cached at a remote 
one of the client nodes, the method comprising the 
steps of: 

initiating the operation at the remote client; 
causing a ^synchronisation of the cached da- 
ta, the resynchronisation comprising the steps 
of: 

a) causing a reconnection to another of the 
nodes; 

b) receiving from that other node, informa- 
tion relating to a portion of the cached data 
of which there is a local copy at the other 
client, and a remote copy at the remote cli- 
ent node, the information showing how up 
to date is the local copy; 

c) comparing at the remote client node, the 
information relating to the remote copy with 
corresponding information relating to the 
local copy, to determine if the remote copy 
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is more up to date than the local copy; and 
d) updating the remote copy based on the 
local copy, according to the result of the 
comparison; and 

s 

completing the operation on the resynchro- 
nised cached data. 

12. A client node for use in a network of nodes, copies 

of data being stored at the nodes, one of the nodes io 
comprising a server, and others of the nodes being 
for other clients at remote locations, the nodes be- 
ing connected intermittently, the client node com- 
prising an application which makes use of the data, 
the client node comprising: 

a connection handler for, following a reconnec- 
tion between the client node and another of the 
nodes, receiving from the other node, informa- 
tion relating to a portion of the data of which 20 
there is a remote copy at the client node, and 
a local copy at the other node, the information 
showing how up to date is the local copy; 
a comparator for comparing the information re- 
lating to the remote copy with corresponding in- 25 
formation relating to the local copy, to deter- 
mine if the local copy is more up to date than 
the remote copy; and 

a data handler for updating the remote copy, 
based on the local copy, according to the result 30 
of the comparison. 

13. A client node as claimed in claim 12, further com- 
prising a monitorfor monitoring the state of connec- 
tions to neighbouring nodes. 35 

14. A client node as claimed in claim 11 or claim 12, 
further comprising a registry for storing an indication 
of which portions of the data are being stored by 
nodes neighbouring the client node. <o 

15. A client node as claimed in any one of claims 11 to 
1 3, further comprising a processor for generating 
and storing an indication of whether the local copy 
has been changed. 45 
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FIG 14 
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FIG 15 
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FIG 16 
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